Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Guppy | Guppy | 4.5 (including) | 4.5 (including) |
| Guppy | Guppy | 4.5.3 (including) | 4.5.3 (including) |
| Guppy | Guppy | 4.5.3a (including) | 4.5.3a (including) |
| Guppy | Guppy | 4.5.4 (including) | 4.5.4 (including) |
| Guppy | Guppy | 4.5.9 (including) | 4.5.9 (including) |